Premint 恶意代码注入攻击细节分析
7 月 17 日，据慢雾区情报反馈，Premint 遭遇黑客攻击。慢雾安全团队在第一时间进行分析和预警。 本文来自慢雾区伙伴 Scam Sniffer 的投稿，具体分析如下...
车规级MCU（PPT，共50页）
原文始发于微信公众号（ittbank）：车规级MCU（PPT，共50页）
流量加密怎么办？主流webshell管理工具流量解密分析【附解密脚本】
一、引言某行动在即，本文基于冰蝎Behinder_v3.0.11和哥斯拉v4.00-godzilla，对它们的加解密方式进行识别和分析【附简易解密脚本】，希望能在行动中助大家一...
24 channel, 100Msps logic analyzer hardware and software
UPDATE 13/07/2022 I have managed to finally test the command line application in Linux and it worked as expected so I'm releasing it. The command l...
TP-Link WR940N/WR941ND Uninitialized Pointer Vulnerability
EIP-9ad27c94 An uninitialized pointer vulnerability exists within TP-Link’s WR940N and WR941ND SOHO router devices specifically during the processi...
SSD Advisory – Froxlor Server Management Panel File Upload Filter Bypass and RCE
TL;DR A vulnerability in Froxlor allows remote attackers to bypass restrictions and execute arbitrary commands as root. Authentication as a custom...
Advisory: FESTO: CECC-X-M1 – Command Injection Vulnerabilities
To evaluate and strengthen the automated vulnerability detection capabilities of ONEKEY, we frequently download and analyze firmware images from a ...
Il malware EnvyScout (APT29) è stato veicolato anche in Italia
Questo CERT ha avuto evidenza oggi di una e-mail fraudolenta veicolata in Italia lo scorso 29 giugno. Il messaggio, che pretende di provenire da “...
North Korean threat actor targets small and midsize businesses with H0lyGh0st ransomware
A group of actors originating from North Korea that Microsoft Threat Intelligence Center (MSTIC) tracks as DEV-0530 has been developing and using r...
每日安全动态推送(07-18)
Tencent Security Xuanwu Lab Daily News• CobaltStrike Malleable PE:https://tttang.com/archive/1662/ ・ CobaltStrike Malle...